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^0 



Please replace the Abstract, in its entirety, with the following: 

The private and public keys of users, as encrypted with a symmetric algorithm by 
using individual user identifying keys are stored at a network server, indexed or 
addressable by user ID, and are sent to the user equipment only when needed. The user 
identifying keys are determined by hashing the users' respective passphrases or biometric 
information. After use, the private key and user identifying key are not retained at the 
user equipment. The encrypted private key is transmitted via the network to the user 
equipment along with a document to be approved by the user (in the case where the 
private key is used for digital signature) and, at the user equipment, the received 
encrypted private key is decrypted using a key determined at the user equipment by 
hashing either the user's passphrase, which is entered by the user, or the user's biometric 
information which is obtained by measurement or scanning the user. The received 
document is modified or merely reviewed, and a digital signature signifying the user's 
approval, is formed as a hash of the approved document encrypted using the user's private 
key. The digital signature and document are transmitted to the server, where verification 
takes place. 
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Please cancel claims 3, 4, 9, 10, 17, and 18. 

Please amend the claims as follows. For convenience, a clean copy of each 
pending claim in this application is attached. 



l\( Amended) A method of administration of private keys for a plurality of users for use 
to encrypt or decrypt items transmitted via a network, there being for each user a 
respecdve set of an ID, user identifying information, private key, and public key 
corresponding to the private key, said method comprising: 
rece^/ing via the network a user's ID; 

reading from a storage means data corresponding to the user having the received 
ID, which data comprises the user's private key encrypted using a key determined from 
identifying information of the useri and 

sending via tn^network the encrypted private key, whereby the encrypted private 
key can be received anoMecrypted at the location of the user using the user's identifying 
information. infbrmatmn; \ 

re ceivin g a digital sip n ^ture manifesting the user's ap proval of a document, which 
digital signature represents a computed hash of the a pproved documen t encrvpted using 
the user's p rivate kev: and \ 

verifying th e received digital\ ignature b v decrvp ting the digital signa ture using 
the user's public ke v and comparing theV result of this decrypting with an inde pendently 
com puted hash of the document \ 
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1 1 . (Twice Amended) A system for administering private keys and corresponding public 
keys for a plurality of users, comprising: 
^^^^^y^ cWputer readable storage means and 

^ ^ a seVer, 

characterized in that: 

the storage means includes therein respective IDs and encrypted private 
keys for the respective users which private keys have been encrypted using respective 
keys determined fr<mi respective user identifying information, and 
the server is configured: 

to\read an encrypted private key from the storage means associated 
with an ID corresponding to a particular user and uggr, 

to transmit the encrypted private key to the particular usefr user, 
to rece\e a digital signature manifesting the user's approval of a 
document, which digital signature represents a computed hash of the approved document 
encrv pted usin g the user's private key, and 

to verify the rfeceived digital signature bv decrvpting the digital 
signature using the user's public kev and comparing the result of this decrypting with an 
inde pendents c om puted hash of the document. 



^CJ>;^>1^ (Amended) A system as claimed in Claim 11, characterized in that there is further 
storbd in the storage means Ihl^respective public keys corresponding to the private keys 
for the \espective users. 

14. (AmendeH) A system as claimed in Claim 12, characterized in that there is further 
stored in the stooge means thfi^respective public keys corresponding to the private keys 
for the respective u^rs. 
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